SecurityInsight settings · Settings > Collection scope & limits
Azure Resource Graph row cap
| Key | SI_AzureMaxResources |
|---|---|
| Where | Settings > Collection scope & limits |
| Type | int |
| Default | No cap of its own; Resource Graph's own limit still applies. |
| Edition | Community |
What it does
A safety cap on how many resources the Azure engine pulls from Azure Resource Graph in one run.
When set
Stops reading Resource Graph once the cap is reached, which shortens first runs in large estates and limits AI spend. Resources beyond the cap are missing unless the exposure graph returns them.
When blank or default
Left blank, the default applies: No cap of its own; Resource Graph's own limit still applies.
Risk and how to reverse it
Changes what is collected from the next run: narrowing it means some assets or data are not collected, so they look absent in profiles, CIs and reports (absence is never read as fixed). Reversible: change it back; the next run collects again.
Requires
Nothing else.
Recommended
Keep the default. Change it when: For a first run in a very large estate; remove it afterwards.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack